Privacy Policy

• Account details — your name and email (from Google or email sign-up), and a phone number (required, so we can confirm and deliver your order).
• Optional profile — birthday and gender, only if you choose to add them. Nothing here is required.
• Order details — the items, delivery address and notes you send us (your order is placed over WhatsApp).
• Basic usage data — via Google Analytics and the Meta Pixel (cookies, device and page-visit data) to understand what's useful and to show relevant ads.

• To confirm, deliver and support your orders, and to reach you about them.
• To send a little something on your birthday, and offers — only if you opted in.
• To keep orders genuine (a verified sign-in + phone cuts fake orders).
• To improve the site and show relevant ads through analytics.

We do not sell or rent your personal information to anyone.

Your account and profile data are stored securely with Google Firebase, with strict access rules: no other customer and no public visitor can ever see your data. Our own team may access it only where genuinely needed to fulfil your orders or help you with support.

We never sell or rent your data. We share the minimum necessary with trusted providers (“data processors”) who help us run the business, each under their own security and privacy terms and data-processing agreements:

• Google Firebase (Google LLC) — secure sign-in and the database for your account & orders.
• Vercel — hosting for the website.
• Resend — sending your order confirmations and welcome emails.
• WhatsApp (Meta) — the channel your order is placed and confirmed on.
• Discord — internal, staff-only order and support notifications (your name/phone, never your email).
• Google Analytics & Meta Pixel — usage insights and ads, only after you accept cookies.

Several of our processors are based outside India (primarily the United States — Google/Firebase, Vercel, Resend, Meta/WhatsApp, Discord). Your data may therefore be processed abroad, under each provider's data-protection agreement. As the data fiduciary, TaazaCratte remains responsible for your data. We only transfer to countries not restricted by the Government of India under the DPDP Act, 2023.

We keep data only as long as needed, then delete or anonymise it:

• Account & profile — Until you delete your account.
• Orders & invoices — 8 years — Indian tax / GST record-keeping (kept even after account deletion, isolated as legal records).
• Support / chat messages — 12 months.
• Server logs — 90 days.
• Marketing consent — Until you withdraw consent.

• Right to information & access — download a copy of your data anytime with “Download my data” in your account.
• Right to correction — edit your name, phone and profile yourself in your account. For anything you can't edit, email us.
• Right to erasure — delete your account & data yourself, or ask us to (we complete within 30 days). Step-by-step instructions: Data Deletion. Orders are kept as legal records — see retention.
• Right to withdraw consent — one click: turn off marketing emails in your account, unsubscribe from any email, or change cookies via “Cookie settings” in the footer.
• Right to nominate — you may nominate another person to exercise your rights if you die or become incapacitated; email our Grievance Officer to register a nominee.
• Right to grievance redressal — contact our Grievance Officer (below); we respond within 30 days.

Under the DPDP Act, 2023 we process your personal data on the basis of your consent (given when you sign in, order, or opt into cookies/marketing) and, for order records, our legal obligation to keep tax records. We do not rely on “legitimate interest” (which the DPDP Act does not provide to private companies), and we never process sensitive data (health, biometric, financial) — we take no card/bank details on the site.

TaazaCratte is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18, we do not target children, and we do not run behavioural tracking or targeted ads aimed at minors. If you believe a minor has given us data, email our Grievance Officer and we'll delete it.

In line with the DPDP Act, 2023, you can raise any privacy concern or complaint with our Grievance Officer, who will respond within 30 days:

Aniket Kulkarni — Grievance Officer
taazacratte@gmail.com
10B, Skyi Star Town Center, Behind Shell Petrol Pump, Bhukum, Pune 412115

TaazaCratte is an Indian service and our primary legal framework is India's DPDP Act, 2023 — everything above is written to it. If you visit from a region with its own privacy law (such as the EU/UK GDPR), the equivalents map as follows: our lawful basis is your consent (plus legal obligation for tax records); the rights we provide — access/download, correction, erasure, withdrawal of consent, and complaint — correspond to GDPR's rights of access, rectification, erasure, portability and objection, and we honour them for everyone, wherever you are. We do not target or ship to the EU/UK; we don't sell personal data; and our Grievance Officer (above) is your contact for any request, regardless of your location.

We maintain a breach-response plan. In the event of a personal-data breach that affects you, we will notify the Data Protection Board of India and affected users without undue delay, describing what happened, the likely impact, and the steps we're taking.

Orders are sent as a WhatsApp message to our team. Anything you share in that chat is also handled under WhatsApp's own privacy terms. We use it only to fulfil your order.

• Optional fields (birthday, gender) are always optional — leave them blank.
• You can opt out of WhatsApp offers anytime from your account or by telling us.
• Delete your account & profile anytime from your account (full instructions on our Data Deletion page), or email us for a copy of your data.

We use necessary storage to keep you signed in and your cart/wishlist working — this is always on because the site needs it. Analytics (Google Analytics) and marketing (Meta Pixel) cookies are optional and off until you opt in via the cookie banner. You can change your choice anytime with “Cookie settings” in the footer, or by clearing cookies in your browser.

We'll update this page if our practices change. Questions about your privacy or your data? Email taazacratte@gmail.com or message us on WhatsApp.